Attack Sensing & Warning Analyst Mid
Accenturefederalservices · Leesburg, VA
About this role
**At Accenture Federal Services** At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer—improving life for people. Join a collaborative, caring community where you’re empowered to grow through hands-on experience, certifications, industry training, and more. --- ## Who you’ll be We’re seeking a **Mid-level Attack Sensing & Warning Analyst** to strengthen a federal agency’s **Tier II SOC** analysis function. You’ll perform deeper analysis of triaged events, support SOP development, and help draft **executive-level cyber incident reports** for the highest-priority incidents. This role increases both technical complexity and ownership: you’ll regularly work events escalated from Tier I, make judgment calls about severity and next steps, and contribute to the SOC’s evolving detection content and playbooks. --- ## What you’ll do - Perform **Tier II analysis** of security events escalated from Tier I monitoring. - Support updates to **SOC SOPs**, ensuring compliance with **DHS 4300A** and **NIST** guidance. - Create and escalate cybersecurity-related investigations to internal (CIRT, CDF) and external entities. - Support triage of **Information/Data Spillage Incident Response** efforts, including handling/sanitization recommendations. - Recommend security content, including **new signatures** and **signature modifications** for **SIEM, EDR, and IDS**. - Contribute analysis and drafting support for **executive-level Cyber Incident Reports** on significant events. - Assist with monitoring tool health and **log ingestion** to identify loss or degradation of monitoring coverage. - Support ad hoc data calls and enumeration requests, including **CISA Binding Operational Directives** when relevant. --- ## What you need - **US Citizenship**; **10+ years** of related experience; **BS degree**; **MS degree** - Minimum of **three (3) years** of professional experience in cybersecurity, information risk management, or information systems risk assessment (**Tier 2 specialization**) - Knowledge of **vulnerability assessment**, **IPS/IDS**, **access control**, **policy enforcement**, **application security**, **protocol analysis**, **incident response**, **DLP**, **encryption**, and **advanced threat protection** --- *Preferred Qualifications: (not included in the provided text)*
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.